Privacy Policy

1. Introduction

Mistveil is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our rental property services or visit our website.

We comply with the Personal Data Protection Act 2012 (PDPA) of Singapore and applicable data protection regulations. By using our services, you consent to the data practices described in this policy.

2. Data Controller

Mistveil is the data controller responsible for your personal data. For questions regarding this Privacy Policy or data protection matters, please contact:

3. Information We Collect

3.1 Information You Provide

We collect information you voluntarily provide when using our services:

• Name, email address, phone number, and contact preferences
• Property search requirements and preferences
• Current and preferred location information
• Employment or relocation details when relevant to service delivery
• Communication history and service feedback
• Payment information for service fees

3.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• Device information (browser type, operating system)
• IP address and general location data
• Website usage data (pages viewed, time spent, navigation patterns)
• Referral sources and search terms used to find our website

3.3 Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. Please refer to our Cookie Policy for detailed information about our cookie practices and your choices.

4. How We Use Your Information

We process your personal data for the following purposes:

• Service Delivery: To provide property search, virtual preview, and tenancy care services as requested
• Communication: To respond to inquiries, provide updates, and maintain ongoing client relationships
• Property Matching: To identify suitable rental properties based on your stated requirements
• Relationship Management: To coordinate with landlords and property professionals on your behalf
• Service Improvement: To analyze service usage and enhance our offerings
• Legal Compliance: To fulfill regulatory obligations and maintain business records
• Marketing: To send service updates or relevant information with your consent

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide services you have requested
• Consent: Where you have provided explicit consent for specific processing activities
• Legitimate Interests: For business operations, fraud prevention, and service enhancement
• Legal Obligation: To comply with applicable laws and regulations in Singapore

6. Data Sharing and Disclosure

We maintain strict confidentiality and only share your information in limited circumstances:

6.1 Property Professionals

With your explicit consent, we may share relevant information with landlords, property management companies, or building administrators to facilitate property viewings and lease negotiations.

6.2 Service Providers

We engage trusted third-party service providers for payment processing, data storage, and website analytics. These providers are contractually obligated to protect your data and use it only for specified purposes.

6.3 Legal Requirements

We may disclose information when required by law, court order, or governmental authority, or when necessary to protect our rights or the safety of individuals.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity with appropriate confidentiality protections.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encrypted data transmission using SSL/TLS protocols
• Secure data storage with access controls and authentication
• Regular security assessments and updates
• Employee training on data protection and confidentiality
• Incident response procedures for data breaches

8. Data Retention

We retain your personal data for the following periods:

• Active Service Period: Throughout service engagement and for six months following completion
• Marketing Communications: Until you withdraw consent or request deletion
• Transaction Records: Seven years from transaction date for tax and regulatory compliance
• Website Analytics: 26 months from collection date

After applicable retention periods, we securely delete or anonymize your data unless longer retention is required by law.

9. Your Rights

Under the PDPA and applicable data protection laws, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal data (subject to retention obligations)
• Withdraw Consent: Withdraw consent for marketing communications or specific processing activities
• Data Portability: Receive your data in a structured, commonly used format
• Objection: Object to processing based on legitimate interests
• Restrict Processing: Request limitation of how we process your data

To exercise these rights, contact us at [email protected]. We will respond within 30 days of receiving your request.

10. Marketing Communications

We may send you service updates, property market insights, or relevant information about our services. You can opt out at any time by:

• Using the unsubscribe link in any marketing email
• Contacting us at [email protected]
• Updating your communication preferences through your account (if applicable)

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

12. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately for deletion.

13. International Data Transfers

Your personal data is primarily stored and processed in Singapore. If data transfer outside Singapore becomes necessary, we will ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

14. Data Breach Notification

In the event of a data breach that may result in significant harm or impact to you, we will notify affected individuals and relevant authorities in accordance with Singapore's PDPA requirements, typically within 72 hours of breach discovery.

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Significant changes will be communicated through email or prominent website notice. The "Last Updated" date at the top of this page indicates when the policy was last revised.

16. Complaints and Regulatory Authority

If you have concerns about how we handle your personal data, please contact us first. We are committed to resolving any privacy concerns promptly.

You also have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore if you believe we have not adequately addressed your concerns.

17. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact: